Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: dUtRqIpotOly5J5BFx9Uy8b9biFtVtPOR25HRQTHWXg=
Subject key identifier: 36:91:48:D1:8C:AC:94:E7:14:1C:58:30:15:AD:61:09:DF:27:46:D6
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 019F859F8E6AADAE1FD67B263E516E0FC41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 17:00:54 +0000
Manifest this update: Tue 21 Jul 2026 17:00:54 +0000
Manifest next update: Wed 22 Jul 2026 17:00:54 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: AMa2eizQgskyV2vWKTfUC8fPvSNjxi7iy/cD0fwt++w=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:8e:6a:ad:ae:1f:d6:7b:26:3e:51:6e:0f:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Jul 21 17:00:54 2026 GMT
Not After : Jul 22 17:00:54 2026 GMT
Subject: CN=369148d18cac94e7141c583015ad6109df2746d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:de:31:0d:46:7c:cc:cb:01:00:7f:ed:2c:
f8:6c:13:72:d3:99:73:8e:0c:f7:b6:fe:71:98:f6:
8c:95:86:63:25:d4:07:d0:89:66:61:fc:5a:28:85:
20:de:88:6a:20:9f:49:81:50:f8:78:39:3c:85:ea:
62:fa:91:9a:28:b7:25:b7:86:f2:fc:db:a5:d2:da:
30:0f:35:c7:4b:3a:78:e7:67:0f:19:f3:d0:d1:b6:
ad:1e:91:bd:02:4c:dd:84:49:60:15:7d:8c:b0:ce:
83:5b:08:52:c7:c5:da:d0:fb:cd:5b:1f:90:fc:2a:
9c:c0:4d:d6:75:92:f6:db:74:1d:5a:ad:04:61:12:
4f:dd:71:db:33:52:b3:23:98:db:a8:32:02:5a:f6:
45:f8:ba:f3:60:60:d7:fd:4a:25:0a:04:25:d3:43:
0e:a4:83:0b:b8:84:14:83:f9:88:46:99:ee:56:86:
a1:65:e3:fb:bf:9f:bb:ea:59:bc:09:5b:1d:99:a0:
f7:48:b5:c4:ac:cb:5e:03:3c:cd:af:65:ab:b2:60:
8b:b4:bf:33:ad:26:90:b1:55:f7:0c:5b:89:8b:58:
74:e2:67:aa:73:6c:39:a6:d6:bb:6f:23:77:50:19:
5f:31:0f:c8:20:0d:12:e7:56:2a:fb:f2:bb:88:8d:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:48:D1:8C:AC:94:E7:14:1C:58:30:15:AD:61:09:DF:27:46:D6
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:68:d3:da:d3:d5:8d:6e:44:4f:5f:37:07:ff:ab:71:01:cd:
0a:6b:e1:39:b8:56:8b:44:f0:29:73:78:44:57:51:7c:ea:78:
b1:9d:8e:eb:c2:58:c4:fa:3f:ea:06:b5:91:dc:52:36:e1:a5:
c8:02:36:c6:73:cd:d1:10:15:58:09:59:82:88:75:0f:12:36:
9f:36:3e:0a:71:b2:38:58:88:ec:a4:b3:71:a1:15:5d:57:ec:
00:96:0a:36:cf:d6:3f:13:78:ce:f2:99:62:61:81:12:85:10:
ba:b2:04:3c:65:51:3b:20:b6:d2:7f:3d:3a:b7:27:32:71:be:
bd:7e:84:b0:99:4c:65:9d:4e:c8:3a:2c:86:ab:bb:91:5f:6b:
5a:bb:65:35:a8:e2:b3:5d:a8:a8:9c:7e:20:a2:07:1e:4f:db:
d5:ce:ff:08:9c:ac:07:a6:5a:d8:88:bc:fe:ee:b5:85:47:d4:
71:38:91:9d:d5:9f:e7:2e:4c:c3:34:9a:44:f5:4a:70:f2:e4:
1a:38:f9:9c:4f:af:d5:de:50:38:95:8e:3e:30:aa:87:c3:2d:
26:e1:01:5a:cc:8e:15:86:8b:52:ad:53:98:79:0f:6e:41:f7:
0b:f9:0f:c0:21:30:b8:ce:48:c6:d0:f5:ae:ce:85:d4:eb:7b:
8d:ba:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:54:21 2026 by rpki-client